Privacy Policy of KOQOON App

1. Preamble

1.1. This Privacy Policy describes how KOQOON GmbH & Co. KG ("KOQOON", "we", "us"), HRA 728513, Dieselstraße 4, 73278 Schlierbach, Germany, processes the personal data collected from you during the use of the KOQOON App and through our integration with our webshop powered by Shopify.

1.2. KOQOON treats your data confidentially and handles it responsibly. We comply with the applicable legal regulations for the protection, lawful handling and confidentiality of personal data, as well as data security, especially the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Act (TKG).

1.3. Personal data includes all information relating to an identified or identifiable person. This includes, for example, your first and last name and your email address.

2. Contact details of the data controller

The data controller is

KOQOON GmbH & Co. KG
Dieselstraße 4
73278 Schlierbach
E-Mail: privacy@koqoon.com

3. Downloading the App

By downloading KOQOON App from the Apple App Store or Google Play Store, you have authenticated yourself to the respective app store, e.g., via your Apple ID or Google Play ID. We have no control over the collection and processing of this data; it is carried out exclusively by the app store you have selected. Therefore, we are not responsible for this data collection and processing; the responsibility lies solely with the respective app store.

The privacy policies of Apple and Google may not fully comply with the requirements of the European General Data Protection Regulation (GDPR). We cannot rule out the possibility that Apple or Google may use the data collected in connection with the download or use of the app in a manner not compliant with the GDPR. KOQOON has no influence over this. KOQOON does not pass on data to Apple or Google.

4. Using the App

4.1. KOQOON collects and uses personal data of its users only to the extent necessary to provide a functional app and its content and services.

4.2. You can use the app as a guest or as a registered user. In “Guest Mode" (as a guest), we do not collect or process any personal data.

4.3. To use the "Guided Mode", you must register once with your name and email address for your user account. The processing of the data provided is for the purpose of fulfilling the contract with you (Art. 6 para. 1 sentence 1 lit. b GDPR). By installing and opening the app, you will be requested to provide or deny consent for us to collect and process your data. If you delete your user profile, we will delete this data unless there are retention requirements.

4.4. During registration and subsequent use of the "Guided Mode", we automatically collect the following data from your mobile device through Google Firebase Analytics: device information (including device model, operating system, unique device identifiers), usage data (including interactions with the app, date and time of use, and pages viewed), and IP address. This data helps us understand how the app is used and improve our services. The legal basis for this data collection is Art. 6 para. 1 sentence 1 lit. f GDPR, as it is necessary to ensure the functionality and security of our systems, optimise our services and protect against misuse.

4.5. This usage data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection, but no later than seven days after collection.

4.6. When you interact with our services through our webshop powered by Shopify, we collect and process your personal data such as your name, email address and order details to manage your account and provide seamless access between the webshop and the KOQOON App.

4.7. We store information on guest customers and newsletter subscribers from our webshop to manage your account status and provide you with relevant updates and services.

4.8. By creating a user account in the KOQOON App, a corresponding user account will also be created in our webshop, and vice versa. You can use the same login credentials for both the KOQOON App and the webshop.

4.9. For more detailed information about our integration with Shopify and how your data is handled when using our webshop, please refer to our Privacy Policy for Webshop.

5. Further Processing Purposes

5.1. To improve the KOQOON app, we also process information about user behaviour within the app (number of visits, duration of visits and user path during visits including clicks).

5.2. Our app uses the analysis tools Google Firebase Analytics and Crashlytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Firebase Analytics collects statistics about the use of the app, and Crashlytics helps monitor and fix app crashes and stability issues. With this information, we aim to improve our offerings and app performance.

Data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA. Data collected includes device information (device model, operating system, unique device identifiers), usage data (interactions with the app, date and time of use, pages viewed), IP address, and crash data (crash reports and logs).

More details about Firebase Analytics and Crashlytics and Google's privacy policy can be found here: Firebase Analytics and Crashlytics Privacy

The use of these analysis tools is based on your consent, Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with future effect by adjusting your settings or by blocking these tools in your browser.

5.3. The processing of the specified data is based on the following legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR): further development and improvement of the usability of the KOQOON app and KOQOON products (usability), ensuring the stability, security and availability of the KOQOON app as well as KOQOON products. If processing of data requires the storage of information on your end device or access to information already stored on the end device, § 25 para. 1, 2 TTDSG is the legal basis for this.

5.3. The personal data will be stored for these purposes for two years.

6. Transmission of Your Personal Data

6.1. If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this is done only on the basis of a consent given by you in advance, if required by law or on the basis of our legitimate interests.

6.2. The following categories of recipients, who are generally processors, may have access to your personal data:

• Service providers for the operation of our app and the processing of data stored or transmitted by the systems (e.g., data centre services, payment processing, IT security). The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR, unless they are processors.
• Governmental authorities/agencies, as far as necessary to fulfil a legal obligation. The legal basis for the transfer is then Art. 6 para. 1 sentence 1 lit. c GDPR.

6.3. Subject to legal or contractual permissions, we process or let the data be processed in a third country outside the EU only if the special conditions of Art. 44 et seq. GDPR are met. This means the processing is based, for example, on specific guarantees, such as the officially recognised determination of an EU equivalent level of data protection or adherence to officially recognised special contractual obligations (so-called "standard contractual clauses").

6.4. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information, Graurheindorfer Str. 153, 53117 Bonn, Germany.

7. Data Security

7.1. The personal data are protected from unauthorised access, use or disclosure by third parties as best as KOQOON can. Our security measures are continuously improved in line with technological development.

7.2. The storage of collected personal data is carried out on a server by Microsoft Ireland Operations Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland as a processor within the European Union. KOQOON refers in this context to the terms and certifications of Microsoft in their respective current version, available at https://azure.microsoft.com/en-gb/support/legal/.

8. Your Rights as a Data Subject

8.1. You have the right to obtain information about the personal data processed by us concerning you. You also have the right to have incorrect data corrected and your personal data deleted (right to be forgotten). You may also revoke any consent given without stating reasons at any time with effect for the future. You also have the right to restrict processing, to receive the data you have provided in a structured, commonly used and machine-readable format (data portability) and the right to object.

8.2. To process your request regarding your rights mentioned above, please contact us directly, for example by post or via email.

8.3. You have the right to lodge a complaint with the competent supervisory authority. Usually, you can contact the supervisory authority of your usual place of residence or our company headquarters.

9. Changes to the Privacy Policy

In the context of the development of data protection law as well as technological or organisational changes, our privacy policy is regularly reviewed for adjustment or supplementation needs. You will be informed about changes.

This privacy policy is effective as of July 2024.